Repository navigation
Security
- The toolchain is Go 1.26.10. It fixes GO-2026-6809 in
crypto/x509,
which the HTTPS server reaches through certificate verification.
Image
docker pull ghcr.io/deadfin-org/deadfin:v0.3.1
docker pull ghcr.io/deadfin-org/deadfin@sha256:9d80d78be2177073aa7906aa6535411112589588542e4c7848dd6f5895dffb2fPlatforms: linux/amd64, linux/arm64. See docs/alpha to install.
Verify
The image carries a build provenance attestation and an SPDX SBOM attestation for each architecture. The SBOMs are attached to this release.
gh attestation verify oci://ghcr.io/deadfin-org/deadfin@sha256:9d80d78be2177073aa7906aa6535411112589588542e4c7848dd6f5895dffb2f --repo deadfin-org/deadfin